Critical Use-After-Free Vulnerability Discovered in Mozilla Firefox and Thunderbird

What changed

A significant security vulnerability has been discovered in Mozilla Firefox and Thunderbird, categorized as a use-after-free issue. This flaw allows attackers to execute arbitrary code within the content process, posing a substantial risk to users.

Reports indicate that this vulnerability is actively being exploited in the wild, raising alarms about the urgency of addressing the issue.

Who is affected

The vulnerability impacts several versions of Mozilla products, putting a wide range of users at risk. Below are the affected versions:

Users of Firefox and Thunderbird should be particularly vigilant, as the following versions are vulnerable:

• Firefox versions earlier than 131.0.2
• Firefox ESR versions earlier than 128.3.1 and 115.16.1
• Thunderbird versions earlier than 131.0.1, 128.3.1, and 115.16.0
• All users of these products are encouraged to update to the latest versions to mitigate risk.

What to do

To protect against potential exploitation, users should immediately update their Mozilla Firefox and Thunderbird applications to the latest versions. Regular updates are crucial for maintaining security.

Additionally, users should remain informed about ongoing security advisories and consider implementing additional security measures, such as using firewalls and antivirus software.

• Update Firefox to version 131.0.2 or later.
• Update Thunderbird to version 131.0.1 or later.
• Monitor security bulletins from Mozilla for future updates and patches.
• Consider employing security best practices to further safeguard systems.